Jenkins Sitemonitor Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-03-29. Vendor: Jenkins Project.

CVEs of Jenkins Sitemonitor Plugin

• CVE-2022-28153 - CVSS 5.4 (medium), 2022-03-29: Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips, resulting in a stored cross-site scripting (XSS)…
• CVE-2019-10317 - CVSS 5.9 (medium), 2019-04-30: Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.